Solved

Setting up RADIUS services on a Cisco 1921 and Windows Server 2003

Posted on 2011-03-07
3
1,116 Views
Last Modified: 2012-05-11
I'm new to Cisco routers and to RADIUS services. I have no idea what I'm supposed to do. I've installed the Internet Authentication Service on the server but that's as far as I've got. I have no idea how to configure IAS on the Windows Server and no idea how to configure the Cisco router to use it when it is configured. Can anyone offer any help?
0
Comment
Question by:Russ Suter
  • 2
3 Comments
 
LVL 17

Accepted Solution

by:
MAG03 earned 500 total points
Comment Utility
For the windows server 2003 configuration have a look at this link:
http://technet.microsoft.com/en-us/library/cc787275(WS.10).aspx

on the cisco device you would need to use AAA, I am assuming you are using telnet for this example:

enable
configure terminal


aaa new-model
aaa authentication default none
(if you have not configured passwords for the console line or any other line for that matter, the cisco device will create a random password and once you log out you will be locked out.)

aaa authentication login RADIUS group radius local-case (This will assign the group NAMED RADIUS to use the radius server and if you lock youself out some how, you can fall back to the locally stored username and password on the cisco device. If you do not want to configure the "fall back" just remove the local-case at the end of the command)

radius-server host x.x.x.x (where x.x.x.x is the ip address of the radius server)

line vty 0 4
login authentication RADIUS
( assigns the AAA authentication group RADIUS to vty line.)
0
 
LVL 20

Author Comment

by:Russ Suter
Comment Utility
That looks like a good start and something worth playing with. However, if I completely screw up the Cisco router settings is there a quick and easy way to reload the last known good configuration without having to power cycle the router?
0
 
LVL 17

Expert Comment

by:MAG03
Comment Utility
you could save the current / old configuration to flash:

copy run flash

you should then be asked to enter a file name to save the configuration under...if i remember correctly.

and then if things go bad issue the following command:

configure replace flash:<file name>

This should replace the running configuration. However I have had varied success with this as it seems on routers the configuration is only merged with the existing configuration.  I have had no issues with using this on switches.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now